Forum Moderators: phranque

Message Too Old, No Replies

changing http request and still logged in

         

julian_lp

12:00 am on Apr 4, 2010 (gmt 0)

10+ Year Member



Lets say I visit google.com, and I was logued in my gmail account. Well, I can see google knows who I am cause my browser sent session/cookie data.
What suprises me is being still identified by google even though I change the international domain in the address bar, for instance google.com.ar
Why I'm identified by google when supodsely I'm not sending session data. The browser shouldnt send google.com data to google.com.ar cause both are distinct domains arent they?
I'm little confused as you may see

regards
julian

lammert

12:36 am on Apr 4, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Hi Julian,

I did some tests just before posting this message and although I was logged in to www.google.com, Google didn't automatically sign me in when I went to some of the other Google domains. I tested www.google.ru and www.google.ee. Are you sure you didn't log in previously under google.com.ar and your computer just resent that cookie? You could try one of the two Google domains I mentioned above to see if you are automatically logged on on those.

If the system signs you in automatically, it could be that Google is serving an image, CSS or JavaScript file from the google.com domain, although you are visiting one of the other domains. Your computer will send the google.com cookie when retrieving that external file, and this could be used by Google to log you automatically in on the other domains.

julian_lp

3:35 am on Apr 4, 2010 (gmt 0)

10+ Year Member



I'm absolutely sure I didnt log in through .com.ar, I just signed in in my gmail account. It's strange, I'll continue trying to figuring out what's going on

btw, neither .ru nor .ee signed in me automatically, as you has already stated

regards
julian